Application Security Engineer

TEKsystems•Dearborn, MI

4d•$70 - $75•Remote

About The Position

This role focuses on advanced threat analysis, security operations, and penetration testing. The Application Security Engineer will execute threat modeling, analyze intelligence data, manage the penetration testing lifecycle, and lead incident response. A key aspect of the role involves translating complex vulnerability data into business risk for non-technical stakeholders and driving the deployment of automated security scans and MFA solutions. The engineer will also be responsible for architecting and implementing encryption standards.

Requirements

Application Security (AppSec)
Secure Software Development Lifecycle (SSDLC)
Vulnerability Management & Remediation
Cloud Security (AWS)
CNAPP, CSPM, ASPM, DSPM
Vulnerability Research & Reverse Engineering
Python and C Programming
Infrastructure as Code (IaC) Security
Security Compliance (SOC 2, PCI DSS)
Endpoint Detection & Response (CrowdStrike)
Penetration Testing
Agile Methodologies

Nice To Haves

Experience leading application security initiatives and improving enterprise security posture.
Strong experience building and managing vulnerability management programs.
Hands-on experience implementing cloud security solutions and controls.
Ability to partner with development teams to integrate security through

Responsibilities

Execute threat modeling and attack vector analysis to quantify risk.
Analyze global intelligence data to inform security protocols and architectural standards.
Utilize advanced monitoring tools to track operational performance and security threats, emphasizing the automation of system health and compliance checks.
Manage the full penetration testing lifecycle, including scoping, execution (ethical hacking), and reporting of high-impact remediation measures.
Translate complex vulnerability data into business risk for non-technical stakeholders, providing cost-benefit analysis for proposed security controls.
Lead the triage and remediation of security incidents, coordinating across teams to mitigate the impact of cyber and insider threats.
Drive the deployment of automated security scans and MFA solutions; interface with development teams to integrate security into full-stack deployments.
Architect and implement encryption standards and procedures for a multi-platform, diverse systems environment.